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We develop a procedure for distilling magic states used in universal quantum computing which 
requires substantially fewer resources than prior schemes. Our distillation circuit is based on a 
family of concatenated quantum codes with a transversal Hadamard operation which can distill 
the eigenstate of the Hadamard operator. A crucial result of this design is that low-fidelity magic 
states can be consumed to purify high-fidelity magic states to even higher fidelity, which we call 
"multilevel distillation." When distilling in the asymptotic regime of infidelity e — > for each input 
magic state, the number of input magic states consumed on average to yield an output state with 
infidelity 0(e^ ) approaches 2'' + 1, which comes close to saturating the conjectured bound in [Bravyi 
and Haah, arXiv: 1209.2426 . We show numerically that there exist multilevel protocols such that 
the average number of magic states consumed to distill from error rate ein = 0.01 to tout in the range 
10~^ to 10"*" is about 141ogjo(l/eout) — 40; the efficiency of multilevel distillation dominates all 
other reported protocols when distilling Hadamard magic states from initial infidelity 0.01 to any 
final infidelity below 10~^. These methods are an important advance for magic-state distillation 
circuits in high-performance quantum computing. 



I. INTRODUCTION 

Quantum computing can potentially solve a hand- 
ful of otherwise intractable problems, such as factor- 
ing large integers [l] or simulating quantum physics [5]. 
Though the number of applications with a known "quan- 
tum speed-up" is small, some are quite valuable, like 
the preceding examples. Quantum computations de- 
pend on coherent entangled states which are very sen- 
sitive to noise, so fault-tolerant quantum computing ad- 
dresses imperfections in physical hardware with error- 
correcting codes [21 m, the most studied of which are 
stabilizer codes [5]. However, while quantum codes pro- 
tect against noise, no stabilizer code natively supports a 
universal set of transversal gates for simulating any quan- 
tum circuit [5] . To achieve universal quantum computing 
with error correction, Bravyi and Kitaev proposed a so- 
lution [7] that has received considerable attention: inject 
faulty "magic states" into the code, purify them using the 
error-corrected gates, then consume them to implement 
otherwise unavailable quantum circuits. These states are 
"magic" because it is possible to distill a subset of high- 
fidelity states from an ensemble of faulty states and be- 
cause they enable universal fault-tolerant quantum com- 
putation. 

Magic state distillation has been the subject of intense 
investigation in recent years. Knill independently intro- 
duced a distillation procedure for \H), the (-1-1) eigen- 
state of the Hadamard operation |8] , prior to the work by 
Bravyi and Kitaev |7] . Reichardt showed that these pro- 
tocols were equivalent and introduced an improvement 
which increased the threshold error rate 0. More re- 
cently, Meier et al. introduced a lO-to-2 distillation pro- 
cedure based on a code with two encoded qubits 10 , and 
Bravyi and Haah introduced a (3fc -I- 8)-to-fc procedure 
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using so-called triorthogonal codes with even k encoded 
qubits IT] . The distillation procedures we develop herein 
continue this trend of using larger, multi-qubit codes. 
Additionally, Fowler and Devitt have proposed methods 
to reduce the overhead for distillation circuits when using 
topological quantum error correction 12 . 

For a quantum state, we quantify the probability of 
it having an error using the infidelity 1 — F, where 
F ~ p\tp) is the fidelity between some mixed state 
p and the ideal state \ip). The initial \H) states are pre- 
pared in a faulty manner before being injected into a 
fault-tolerant quantum code, and Reichardt proved that 
the theoretical-maximum infidelity for \H) states to be 
distilled is about 0.146 The efficiency of magic state 
distillation is of great importance to fault-tolerant quan- 
tum computing. Although magic states are the widely 
preferred method for achieving universality, distillation 
circuits are currently estimated to require the majority 
of resources in a quantum computer |131 114j. Therefore, 
advances in distillation protocols are important steps to- 
ward making quantum computing possible. 

This paper presents two important, related results. 
First, we specify a family of [[n, (n — 4), 2]] Calderbank- 
Shor-Steane (CSS) quantum stabilizer codes [IS] HI] 
known as "iJ codes" with transversal Hadamard oper- 
ation, for even n > 6. These codes are dense, in the 
sense that the ratio of logical qubits to physical qubits 
(n — 4)/?i — 1 as n — )■ oo. The H codes allow distillation 
of magic states with the same (3fc -I- 8)-to-A: efficiency as 
Ref. [11] , and later we present further evidence that there 
may be connections between these methods. Second, we 
demonstrate that concatenated versions of H codes al- 
low for distillation of high-fidelity encoded magic states 
by consuming low-fidelity magic-state ancillas. We call 
this "multilevel distillation," and it leads to the most ef- 
ficient procedure for distilling magic states reported so 
far. For suitably small infidelity e in each input magic 
state with independent errors, there exists a multilevel 
distillation protocol that yields output magic states with 
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infidelity 0(e^ ) and requires asymptotically 2'" + l input 
states per distilled output state. This efficiency conies 
close to the "optimality" bound conjectured in Ref. [TT] . 
While this result is interesting theoretically, we also nu- 
merically study the distillation efficiency for = 0.01, 
which is of practical importance to fault-tolerant quan- 
tum computing. We find that multilevel distillation is 
superior to previously reported protocols when the final 
fidelity is below 10~^. 

Throughout this paper, we adopt the following no- 
tation for single-qubit Pauli operators, for readability: 
X = cr^, Z = cr^, and I is the identity operator on a 
qubit. Additionally, we use "physical qubit" to denote 
those qubits used to produce a quantum code (includ- 
ing the redundancy of code stabilizers [11 [5]), whereas 
"logical qubits" are the logical degrees of freedom inside 
the code, again for readability. It may be the case that 
physical qubits are themselves the logical qubits of an- 
other code, providing fault tolerance, which is a standard 
technique of quantum code concatenation [31 HI [T7] . 



II. A FAMILY OF CODES WITH 
TRANSVERSAL HADAMARD 

We define a family of CSS quantum codes which en- 
code an even number k logical qubits using [k + 4) phys- 
ical qubits and possess a transversal Hadamard opera- 
tion, so we call them collectively "i/ codes" and de- 
note Hn as the code using n = k + i physical qubits. 
The transversal Hadamard operation at the physical level 
enacts a transversal Hadamard operation at the logi- 
cal level, which will be a useful property when we later 
concatenate these codes. Table [T] specifies the stabiliz- 
ers [31 |5| and logical operators for any H code. The 
smallest code, Hq, is shown explicitly, and other codes 
can be generated from a simple pattern, as follows. Us- 
ing our ordering, let us label the first four physical qubits 
as the "preamble," while the remaining physical qubits 
are "index" qubits. The operators in the preamble are 
the same for all H codes. After the preamble, the sta- 
bilizers have an I, X, or Z on every index qubit. The i^^ 
logical Xi has an X acting on the i^^ index qubit, and I 
on all other index qubits; the logical Zj follows the same 
pattern. 

It is straightforward to verify that the H codes 
have a transversal Hadamard operation. Application 
of Hadamard gates to all physical qubits simply inter- 
changes stabilizer generators, while it maps X^ i— Z^ and 
Zi H> X^. Additionally, these are distance-2 codes because 
the Kronecker product of two logical Pauli operators of 
the same type for two distinct logical qubits has weight 
2 (physical Pauli operators); the Kronecker product of 
same-type Pauli operators on all logical qubits is also 
weight-2. The stabilizers come in matched X/Z pairs, so 
there are no weight- 1 logical operators. 

The (+1) eigenstate \H) of the Hadamard operator 
H — (l/\/2)(X -I- Z) is a magic state for universal quan- 



Stabilizers 


XXXX II(I...) 
ZZZZ II(I...) 

XIXI xx(x...) 
ZIZI zz(z...) 


Xi = 

X2 = 


XXII XI(I...) 
XXII IX(I...) 

(etc.) 


Zi = 

Z2 = 


ZZII ZI(I...) 
ZZII IZ(I...) 

(etc.) 



TABLE I. Stabilizer generators and logical operators for the 
family of H codes. The notation XXXX is shorthand for a 
Kronecker product of the Pauli operator on four qubits, 
where order indicates which qubits these operators act on. 
The smallest code is shown, and the operators in paren- 
theses show how to extend the pattern to larger H codes. 
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FIG. 1. Distillation of |-ff) magic states using the Hq code. 
Two initial \H) states (red) are encoded with four additional 
qubits, initiaUzed to |0) here. The boxes "Encode" and "De- 
code" represent quantum circuits for encoding and decoding 
the Hq code, which are not shown here. The procedure suc- 
ceeds if neither the Hadamard-basis measurement nor the 
error-detection measurement indicate an error, and the re- 
sult is two \H) states of higher fidelity; otherwise, the results 
are discarded. Each controlled-Hadamard gate consumes two 
\H) states, so this is a 14-to-2 distillation procedure. 



tum computing [THllj. In particular, two of these magic 
states can be consumed to implement a controlled-H op- 
eration [SI jTU], enabling one to measure in the basis 
of H. Our distillation procedure is based on the fol- 
lowing heuristic: (a) encode faulty \H) magic states in 
an H code; (b) measure in the basis of the transversal 
Hadamard gate by consuming \H) ancillas; (c) reject the 
output states if either the measure-Hadamard or code- 
stabilizer circuits detect an error. For example, when an 



fc+4) 



code is used for distillation, k \H) states are en- 



coded as logical qubits using (/c-t-4) physical qubits. Each 
transversal controlled-Hadamard gate consumes two \H) 
states [TOj, and this gate is applied to all physical qubits, 
which leads to the {2>k + S)-io-k input/output distiUa- 
tion efficiency of these codes. A diagram of the quantum 
circuit for distillation using Hq is shown in Fig. [l] 
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FIG. 2. Concatenation of H codes, (a) Eight bare "LO" 
qubits are encoded in an Hs, code to form four logical "LI" 
qubits. (b) The LI logical qubits from eight copies of the 
H% code are then encoded at another level with Hg, codes, 
yielding a [[64, 16,4]] concatenated code with 16 logical "L2" 
qubits. 



III. MULTILEVEL DISTILLATION 

Multilevel distillation uses concatenated codes with 
transversal Hadamard for distillation, in such a manner 
that the \H) ancillas consumed for transveral controlled- 
Hadamard measurement are of lower fidelity than the 
encoded logical \H) states being distilled. When two 
quantum codes with transversal Hadamard are concate- 
nated, the resulting code also has transversal Hadamard. 
Under appropriate conditions, the distance of the con- 
catenated code is the product of the distances for the 
individual codes: d! = did2 ^Oj- Specifically, the logical 
qubits of the first level of encoding are used as physical 
qubits for completely distinct codes at the second level. 
Consider a two-level scheme: if the codes at first and 
second levels are [[rii, {rii — 4), 2]] and [[n2, ("2 — 4), 2]], 
respectively, then the concatenated code is [[niri2, {ni — 
4)(rt2 — 4),4]], as shown in Fig.|2] Thus the concatenation 
of two H codes yields a distance-4 code with transversal 
Hadamard, and r-level concatenation has distance 2''. 

At the logical level, the transversal controlled- 
Hadamard operation detects a single error in the encoded 
qubits, for any degree of concatenation. If the logical \H) 
states have independent error probabilities ei, then the 
distilled states will have infidelity O(ei^) with perfect 
distillation. In the preceding example, the transversal 
controlled-Hadamard gates at the lowest physical level 
require (2nin2) \H) magic states, each of which has in- 
fidelity 62. However, this is a distance-4 code, so for 
independent input error rates, the probability of failing 
to detect errors at the physical level is 0{e2^) + 0(eie2^) 
(rigorous analysis is provided below). Therefore, the \H) 
states consumed at the physical level can be of lower fi- 
delity than the magic states encoded as logical qubits and 
successfully perform distillation. 

One type of error event is not detected by either 
the controlled-Hadamard measurement or the error- 



detection circuits of the code. If there is an error in 
an encoded magic state and errors on two physical states 
used for the same controlled-Hadamard gate at the physi- 
cal level, then the combination of these errors will cause a 
faulty Hadamard-basis measurement while not being de- 
tected by the H code. This event leads to the 0(eie2^) 
error probability from before, which is not an issue at 
levels one and two, but it must be addressed in lev- 
els three and up. The solution for level-r distillation, 
where r > 3, is to repeat the controlled-Hadamard mea- 
surement 2^''^^) times, consuming 2^'"^^^ magic states 
at the physical level. After each transversal controlled- 
Hadamard, the code syndrome checks for detectable error 
patterns. With this procedure, one encoded-state error 
would also require at least 2^''"^^ errors in physical-level 
magic states to go undetected. 

Multilevel distillation circuits tend to be much larger 
in both qubits and gates than other protocols. Because 
there can be many encoded qubits, the protocol is still 
very efficient, but the size of the overall circuit is large. 
At any number of levels, the distilled output states have 
correlated errors, so distilled magic-state qubits in our 
protocol must never meet again in a subsequent distil- 
lation circuit (we require that errors are independent 
within the same encoding block, as in Ref. JlOi). Let 
us suppose that one performs two rounds of distillation, 
where the first round uses one-level distillers with k en- 
coded magic states and the second round uses two-level 
distillers with encoded states. Because the inputs to 
the second round must have independent errors, the total 
number of magic states required is bk^ + 0{k^). For r 
rounds in this fashion, the total number of input magic 
states is (2'- + l)(fc)'^('^+i)/2 + 0((fc)['-('-+i)/2l-i), so the 
overall size of the procedure becomes unwieldy after three 
or four rounds. However, since efficient multilevel distil- 
lation protocols, measured in the ratio of low- fidelity \H) 
input states consumed to yield a single high-fidelity \H) 
output, use fc » 1 and multiple rounds, the greatest ben- 
efit from their application is seen in large-scale quantum 
computing, where a typical algorithm run may require 
10^^ magic states, each with error probability 10~^^ |14j . 

The "scaling exponent" 7 of a distillation protocol 
characterizes its efficiency. Specifically, O(log'''(ein/eout)) 
input states are required to distill one magic state of infi- 
delity Eout- Scaling exponents for previous protocols are 
7 « 2.46 ("IS-to-l" [71[H]), 7 « 2.32 ("lO-to-2" [10]), and 
7 ~ 1.6 (triorthogonal codes [H]). Moreover, Bravyi and 
Haah conjecture that no magic-state distillation protocol 
has 7 < 1 [II . In this work, each increasing level of mul- 
tilevel distillation doubles the number of consumed in- 
puts because of the repeated controlled-Hadamard mea- 
surements. In the limits of fc — 00, e — 0, multilevel pro- 
tocols consume 2'' + l input states to each output state for 
r rounds of distillation. The final infidelity is 0((ein)^ ), 
so the scaling exponent is 7 = log(2'' -I- l)/log(2'') — >• 1 
'AS r ^ 00, which is the closest any protocol has come 
to reaching the conjectured bound. We show below that 
7 sa 1 for error rates relevant to quantum computing. 
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IV. ANALYSIS 

We make the conventional assumption that ah quan- 
tum circuit operations are perfect, except for the initial 
\H) magic states we intend to distill; for a more explicit 
treatment, see Ref. [H]. This is a valid approximation 
if all operations are performed using fault-tolerant quan- 
tum error correction where the logical gate error is far 
below the final infidelity for distilled magic states [31 [13] . 
Additionally, following the methodology in Refs. [71 llOj. 
we can consider each magic state with infidelity e as the 
mixed state (1 - e) \H) {H\ + e \-H) {-H\, where \-H) 
is the (—1) eigenstate of the Hadaniard operation. 

Determining the infidelity at the output of distillation 
becomes simply a matter of counting the distinct ways 
that errors lead to the circuit incorrectly accepting faulty 
states. Denote error probabilities for encoded states as 
£1 and for states consumed for physical-level controlled 
Hadamard as €2, which are all assumed to be indepen- 
dent. Then a one-level, {3k + 8)-to-fc distiller using the 
H(k+4) code has output error rate on each \H) state as 

Cout = (fc-l)ei' + (2fc + 2)e2' + ..., (1) 



where higher order terms denoted (...) are omitted since 
we are interested in the {ei, £2} — regime. The lowest- 
order error rates are both second order, because the 
Hadamard basis measurement and i?(fc+4) code can to- 
gether detect a single error in any magic state. The prob- 
ability of the distiller detecting an error, in which case the 
output is discarded, is fcei -|-2(fc-|-4)e2 -l-O(ei^) -|-0(e2^). 
If ei = £2 = e, then the output error rate of {3k + l)e^ 
conditioned on success is the same as in Ref. [TT]. 

The two-level distiller constructed from concatenated 
H(k+4:) codes can detect any of: a single error in the fc^ 
encoded magic states; at least three errors in the 2(fc-|-4)^ 
\H) states consumed at the lowest physical level; or one 
encoded-state error and one physical error. The output 
error rate for each distilled \H) state is 

eout = (fc' - l)ei' + 8(fc2 + 4fc + 3)£2^ + {k + \)t^e2^ + . . . 

(2) 

The probability of the two-level distiller detecting an er- 
ror is fc2e^+2(fc-h4)2£2-h2/fc2(fc + 4)2£ie2-f 0(£i2)-hO(£22). 

Multilevel distillation for level r > 3 requires repeat- 
ing the controUed-Hadamard measurement 2''"^ times. 
Doing so ensures that the lowest-order error events are: 
0(£i^) for two encoded errors; 0((£2)^ ) for physical- 
level errors; and 0{tx{t2f ) for one encoded error 
and 2^''"^^ physical errors that come in pairs not de- 
tected by the code, but propagate to all of the Hadamard- 
basis measurements. If £1 ^ (^2)^' then all three of 
these lowest-order error events are approximately equally 
likely, and the protocol is balanced. 

Figure [3] shows the performance of distillation proto- 
cols identified by numerical search. The markers indicate 
the type of the last round of distillation. As expected, 
there is a trend of using higher-distance multilevel proto- 
cols as the output error rate £out decreases. The plot also 
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FIG. 3. Average number of input |_ff) states with ein = 0.01 
consumed to produce a single output \H) state with fidehty 
tout. Multiple-round distillation can use different protocols in 
each round. The markers indicate the protocol type for the 
last round of distillation. Only efficient protocols are plotted, 
meaning that for a given eout, no other protocol requires fewer 
input states; the search space was constrained such that en- 
coded qubits fc < 40 for all H codes and number of rounds 
r < 5. The grey-shaded squares, triangles, and circles show, 
respectively, the best distillation with 15-to-l [7], lO-to-2 [lOj . 
and triorthogonal-code [11] protocols. The dashed line is a 
linear fit 141og-^Q(l/eout) - 40. 



shows the best results achievable with prior protocols, 
and multilevel distillation is dominant for £out < 10"^, 
which is the regime pertinent to quantum computing. 
The linear fit provides empirical evidence that the scal- 
ing exponent is 7 w 1 in this regime. 



V. CONCLUSIONS 

Interesting similarities between the work in Ref. [TT] 
and our results merit further study. The distillation ra- 
tio (3fc -f 8)-to-fc and the lowest-order error of (3A: -f 1)£^ 
for the R codes are exactly the same as for distillation 
using triorthogonal codes [TT]. Moreover, Reichardt has 
previously shown a connection [9] between distillation 
using the Reed-MuUer code with transversal phase gate 
T = exp(i7r(T^/8), like the triorthogonal codes, and distil- 
lation using the Steane code with transversal Hadamard, 
like our H codes; this suggests a similar connection may 
exist between the work herein and that of Ref. [TT]. A 
high-distance, high-density CSS code with transversal T 
would be desirable since it would allow one to directly dis- 
till a three-qubit magic state for controUcd-controlled-Z, 
which is locally equivalent to the Toffoli gate [4 . 

Multilevel distillation is an important development for 
large-scale, fault-tolerant quantum computing, where the 
distillation of magic states is often considered the most 
costly subroutine [131 El] ■ Other codes with high den- 
sity, high distance, and transversal Hadamard may yet 
be discovered, though for the present, H codes are useful 
for their high efficiency and simple construction. 
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